payload_logs

Creates, updates, deletes, gets or lists a payload_logs resource.

Overview

Name	payload_logs
Type	Resource
Id	cloudflare.zero_trust.payload_logs

Fields

The following fields are returned by SELECT queries:

list

Payload log settings.

Name	Datatype	Description
masking_level	string	Masking level for payload logs. - full: The entire payload is masked. - partial: Only partial payload content is masked. - clear: No masking is applied to the payload content. - default: DLP uses its default masking behavior. (full, partial, clear, default)
public_key	string	Base64-encoded public key for encrypting payload logs. Null when payload logging is disabled.
updated_at	string (date-time)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list	select	account_id		Gets the current payload logging configuration for DLP, showing whether matched content is being logged.
update	replace	account_id		Enables or disables payload logging for DLP matches. When enabled, matched content is stored for review.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
account_id	string	The Cloudflare account ID.

SELECT examples

list

Gets the current payload logging configuration for DLP, showing whether matched content is being logged.

SELECT
masking_level,
public_key,
updated_at
FROM cloudflare.zero_trust.payload_logs
WHERE account_id = '{{ account_id }}' -- required
;

REPLACE examples

update

Enables or disables payload logging for DLP matches. When enabled, matched content is stored for review.

REPLACE cloudflare.zero_trust.payload_logs
SET 
masking_level = '{{ masking_level }}',
public_key = '{{ public_key }}'
WHERE 
account_id = '{{ account_id }}' --required
RETURNING
errors,
messages,
result,
success;